CVE-2019-15123

概要

参考情報

• vikisolutions.com/products/Vera.html · Product
• gosecure.net/blog/2020/06/11/vera-vulnerable-to-authenticated-remote-code-execution-cve-2019-15123 · Third Party Advisory

vera のその他の脆弱性

• CVE-2019-20484高 8.1An issue was discovered in Viki Vera 4.9.1.26180. A user without access to a project could download or upload project files by opening the P…
• CVE-2019-20483中 5.4An issue was discovered in Viki Vera 4.9.1.26180. An attacker could set a user's last name to an XSS Payload, and read another user's cookie…